1e5e81e4bbe910b32d5dd043ce83bfa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e5e81e4bbe910b32d5dd043ce83bfa6
Size

56KB
MD5

1e5e81e4bbe910b32d5dd043ce83bfa6
SHA1

642099b8ebd25748e3f7e251970297eae2bd7338
SHA256

a98c93563ffcc3fd469722125ef3b2985362f29154cb8d887aa7a9a50ae47d1f
SHA512

fcde5febb7771d3959d9d07eac396c3749b5214b48bb0bb42f679986a5fea4e693b8dfdb0f0bd157fb776a2ae0bc564bc7c5cd0fe9371650db8e56c592bd6dfa
SSDEEP

1536:lG/ewDHoiLmdMDt+Tr9xzMUpPcikkHPBcA:lGGwDIiLgmt+f9xzMQUikkHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e5e81e4bbe910b32d5dd043ce83bfa6

Files

1e5e81e4bbe910b32d5dd043ce83bfa6
.exe windows:4 windows x86 arch:x86

ee04a728f61154fe307e12da94bbb5a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
FindVolumeClose
GetNumberOfConsoleMouseButtons
GetConsoleAliasesLengthA
SetFileShortNameA
SetMessageWaitingIndicator
GetNumberFormatA
GetLongPathNameA
GetCommModemStatus
GetVolumeInformationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE